Re: RE: Iptables Clues and Advices.

[Christian Friedl <xian () mediaclan at>]

Jason Dixon <jasondixon () myrealbox com> writes on 
Tue, 08 Apr 2003 18:19:44 +0200 (METDST):

> For all the folks who illusion that DROP is more secure than REJECT,


Hehe. Yeah, the classical good-guy/bad-guy (or is it good-person/bad-person these days *g*) dilemma. Well-meaning but 
ineffective security measures will hurt the good ones but not affect the bad ones.

I'm in favour of REJECT, myself. I like to be polite, even if I have to be cautious. Just for the files.
;-)

chris 

-------------------------------------------------------------------
Is SPAM over-loading your e-mail server, disk space or bandwidth?
SurfControl E-Mail Filter is flexible, intelligent and policy-driven
protection.
http://www.securityfocus.com/SurfControl-security-basics2
Download your free fully functional trial, complete with 30-days of free technical support.
Stop SPAM before it stops you.
-------------------------------------------------------------------